	securecerts.ie is a division of

Payment Options

Cobalt Raq3

Installing your Web Server Certificate

Your True BusinessID certificate will be sent to you by email. The email message includes two certificates: A "server" certificate (your Web server certificate), and a "root" certificate (the "GeoTrust True BusinessID Certificate").

Both certificates are included within the body of the email message. Copy the certificates from the body of the email and paste them into a text editor to create text files.

Both certificates must be installed for the server certificate to work properly. If the root certificate is not installed, you will receive a warning from your browser stating that the server certificate was issued by an untrusted certificate authority.

Installing a certificate for a "Virtual Site"

Install the server certificate as described in the Cobalt manual.

Next, install the root certificate, as follows:

Save the GeoTrust True BusinessID Certificate as "geotrustca" and place it into the /etc/httpd/conf/ directory.

Be sure to include ---BEGIN CERTIFICATE--- and ---END CERTIFICATE---

Open the httpd.conf file in a text editor. It is located in the /etc/httpd/conf directory.

Find the following section:


 # Hardcoded, issues with mod_perl and cobalt modules.
 if (/^<\/Virtual/ and (-f "/etc/httpd/ssl/$group")) { 
 $ret = ssl_cert_check("/home/sites/$group/certs/"); 
 if ($ret=~/^2/o) { 
 $PerlConfig .= "Listen $ip:443\n"; 
 $PerlConfig .= "\n"; 
 $PerlConfig .= "SSLengine on\n"; 
 $PerlConfig .= "SSLCertificateFile /home/sites/$group/certs/certificate\n"; 
 $PerlConfig .= "SSLCertificateKeyFile /home/sites/$group/certs/key\n"; 
 
 *****Add this line*****
 
 $PerlConfig .= "SSLCACertificateFile /etc/httpd/conf/geotrustca\n";  
 $PerlConfig .= join('', @ssl_conf); 
 } elsif (ssl_cert_check("/home/sites/home/certs/") =~ /^2/ ) { $PerlConfig .= "Listen $ip:443\n"; 
 $PerlConfig .= "\n"; 
 $PerlConfig .= "SSLengine on\n"; 
 $PerlConfig .= "SSLCertificateFile /home/sites/home/certs/certificate\n"; 
 $PerlConfig .= "SSLCertificateKeyFile /home/sites/home/certs/key\n"; 
 $PerlConfig .= join('', @ssl_conf); 
 } else { 
 print STDERR "Site $group has invalid certificate: $ret\n";

Save changes and exit the text editor.

*Note: Ensure that the "SSLCACertificateFile" directives are using the correct path to the GeoTrust True BusinessID Certificate (geotrustca).

Restart the Apache server with the following command:

/etc/rc.d/init.d/httpd restart

Test your certificate by using a browser to connect to your server. Use the https protocol directive (e.g. https://your server/) to indicate you wish to use secure HTTP.

Note: The padlock icon on your browser will be displayed in the locked position if your certificates are installed correctly and the server is properly configured for SSL.

Home - Products - Pricing - About Us - Payment Options
Contact Us - Sitemap - Login - Help

Domain Registration - Web Hosting - Website Promotion
Dedicated Servers and Colocation - Secure Certificates
Domain Lookup- Web Design Ireland